attribute: avoid reflection for small fixed-array slice types in hashKV by alliasgher · Pull Request #8203 · open-telemetry/opentelemetry-go

alliasgher · 2026-04-14T20:12:41Z

Applies the same type-switch fast path used for SLICE in #8166 to the four existing slice types: BOOLSLICE, INT64SLICE, FLOAT64SLICE, and STRINGSLICE.

The slice values for len 0-3 are stored as [N]T fixed arrays by SliceValue. Type-asserting directly on those avoids all reflection overhead for the most common lengths. Longer slices fall through to the existing reflect.ValueOf path unchanged.

Benchmarks

BenchmarkHashKVsSlices exercises only slice-type attributes (len 2-3, which hit the fixed-array fast path):

BenchmarkHashKVsSlices-10    ~99 ns/op    0 B/op    0 allocs/op

Micro-benchmark of the per-element path for [2]bool:

old (reflect): ~7 ns/op
new (type switch): ~1 ns/op   (~5.7x faster)

The overall BenchmarkHashKVs is unchanged since it includes many non-slice types, but the slice-specific path is significantly faster.

Replace reflect.ValueOf + reflection-based iteration with direct typed slice access (asBoolSlice, asInt64Slice, asFloat64Slice, asStringSlice) for BOOLSLICE, INT64SLICE, FLOAT64SLICE, and STRINGSLICE in hashKV. This avoids the per-element reflection overhead — the same improvement applied to the SLICE type in open-telemetry#8166. Fixes open-telemetry#8200 Signed-off-by: alliasgher <alliasgher123@gmail.com>

Type-switch on the [0..3]T fixed arrays stored by SliceValue to handle the most common slice lengths without reflection. Larger slices still use the reflect path as before. No allocations on either path. Fixes open-telemetry#8200 Signed-off-by: alliasgher <alliasgher123@gmail.com>

Type-switch on the [0..3]T fixed arrays to avoid reflection for the most common slice lengths. For longer slices the existing reflect path is kept. A new BenchmarkHashKVsSlices shows the per-element path for fixed-array slices is ~5-6x faster than the reflect-based path. Fixes open-telemetry#8200 Signed-off-by: alliasgher <alliasgher123@gmail.com>

pellared · 2026-04-14T20:31:25Z

Closing per OTel Generative AI Contribution Policy

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/cache](https://redirect.github.com/actions/cache) | action | patch | `v5.0.4` → `v5.0.5` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..open-telemetry/issues/5322) for more information. --- ### Release Notes <details> <summary>actions/cache (actions/cache)</summary> ### [`v5.0.5`](https://redirect.github.com/actions/cache/releases/tag/v5.0.5) [Compare Source](https://redirect.github.com/actions/cache/compare/v5.0.4...v5.0.5) ##### What's Changed - Update ts-http-runtime dependency by [@&open-telemetry#8203;yacaovsnc](https://redirect.github.com/yacaovsnc) in [#&open-telemetry#8203;1747](https://redirect.github.com/actions/cache/pull/1747) **Full Changelog**: <actions/cache@v5...v5.0.5> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

open-telemetry#8180) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/ashanbrown/makezero/v2](https://redirect.github.com/ashanbrown/makezero) | `v2.1.0` → `v2.2.1` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fashanbrown%2fmakezero%2fv2/v2.2.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fashanbrown%2fmakezero%2fv2/v2.1.0/v2.2.1?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..open-telemetry/issues/5322) for more information. --- ### Release Notes <details> <summary>ashanbrown/makezero (github.com/ashanbrown/makezero/v2)</summary> ### [`v2.2.1`](https://redirect.github.com/ashanbrown/makezero/releases/tag/v2.2.1): Require a minimum of one package [Compare Source](https://redirect.github.com/ashanbrown/makezero/compare/v2.2.0...v2.2.1) Suggestion from [@&open-telemetry#8203;m-ocean-it](https://redirect.github.com/m-ocean-it) ([#&open-telemetry#8203;24](https://redirect.github.com/ashanbrown/makezero/pull/24)) ### [`v2.2.0`](https://redirect.github.com/ashanbrown/makezero/releases/tag/v2.2.0): Add support for slice type alises [Compare Source](https://redirect.github.com/ashanbrown/makezero/compare/v2.1.0...v2.2.0) ### Added - Support slice type aliases per [#&open-telemetry#8203;25](https://redirect.github.com/ashanbrown/makezero/pull/25). Thanks [@&open-telemetry#8203;RyabovNick](https://redirect.github.com/RyabovNick) . </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

….1 (open-telemetry#8182) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/ashanbrown/forbidigo/v2](https://redirect.github.com/ashanbrown/forbidigo) | `v2.3.0` → `v2.3.1` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fashanbrown%2fforbidigo%2fv2/v2.3.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fashanbrown%2fforbidigo%2fv2/v2.3.0/v2.3.1?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..open-telemetry/issues/5322) for more information. --- ### Release Notes <details> <summary>ashanbrown/forbidigo (github.com/ashanbrown/forbidigo/v2)</summary> ### [`v2.3.1`](https://redirect.github.com/ashanbrown/forbidigo/releases/tag/v2.3.1) [Compare Source](https://redirect.github.com/ashanbrown/forbidigo/compare/v2.3.0...v2.3.1) switch from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 ([#&open-telemetry#8203;66](https://redirect.github.com/ashanbrown/forbidigo/pull/66)) Thanks [@&open-telemetry#8203;scop](https://redirect.github.com/scop) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

….0 (open-telemetry#8184) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [go.opentelemetry.io/collector/pdata](https://redirect.github.com/open-telemetry/opentelemetry-collector) | `v1.55.0` → `v1.56.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fcollector%2fpdata/v1.56.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fcollector%2fpdata/v1.55.0/v1.56.0?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..open-telemetry/issues/5322) for more information. --- ### Release Notes <details> <summary>open-telemetry/opentelemetry-collector (go.opentelemetry.io/collector/pdata)</summary> ### [`v1.56.0`](https://redirect.github.com/open-telemetry/opentelemetry-collector/blob/HEAD/CHANGELOG.md#v1560v01500) ##### 💡 Enhancements 💡 - `all`: Update semconv package from 1.38.0 to 1.40.0 ([#&open-telemetry#8203;15095](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/15095)) - `cmd/mdatagen`: Only allow the `ToVersion` feature flag attribute to be set for the `Stable` and `Deprecated` stages. ([#&open-telemetry#8203;15040](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/15040)) To better match the feature flag README (<https://github.com/open-telemetry/opentelemetry-collector/blob/main/featuregate/README.md#feature-lifecycle>). ##### 🧰 Bug fixes 🧰 - `exporter/debug`: Guard from out of bounds profiles dictionary indices ([#&open-telemetry#8203;14803](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14803)) - `pdata/pprofile`: create a copy when the input is marked as read-only ([#&open-telemetry#8203;15080](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/15080)) - `pkg/otelcol`: Fix missing default values in unredacted print-config command by introducing confmap.WithUnredacted MarshalOption. ([#&open-telemetry#8203;14750](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14750)) Resolves an issue where the unredacted mode output omitted all default-valued options. By introducing a new MarshalOption to disable redaction directly at the confmap encoding level, the unredacted mode now preserves all component defaults natively without requiring post-processing. - `pkg/service`: Headers on the internal telemetry OTLP exporter are now redacted when the configuration is marshaled ([#&open-telemetry#8203;14756](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14756))  </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github/codeql-action](https://redirect.github.com/github/codeql-action) | action | patch | `v4.35.1` → `v4.35.2` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/5322) for more information. --- ### Release Notes <details> <summary>github/codeql-action (github/codeql-action)</summary> ### [`v4.35.2`](https://redirect.github.com/github/codeql-action/releases/tag/v4.35.2) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.35.1...v4.35.2) - The undocumented TRAP cache cleanup feature that could be enabled using the `CODEQL_ACTION_CLEANUP_TRAP_CACHES` environment variable is deprecated and will be removed in May 2026. If you are affected by this, we recommend disabling TRAP caching by passing the `trap-caching: false` input to the `init` Action. [#3795](https://redirect.github.com/github/codeql-action/pull/3795) - The Git version 2.36.0 requirement for improved incremental analysis now only applies to repositories that contain submodules. [#3789](https://redirect.github.com/github/codeql-action/pull/3789) - Python analysis on GHES no longer extracts the standard library, relying instead on models of the standard library. This should result in significantly faster extraction and analysis times, while the effect on alerts should be minimal. [#3794](https://redirect.github.com/github/codeql-action/pull/3794) - Fixed a bug in the validation of OIDC configurations for private registries that was added in CodeQL Action 4.33.0 / 3.33.0. [#3807](https://redirect.github.com/github/codeql-action/pull/3807) - Update default CodeQL bundle version to [2.25.2](https://redirect.github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.2). [#3823](https://redirect.github.com/github/codeql-action/pull/3823) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

…to v2.29.0 (#8214) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/grpc-ecosystem/grpc-gateway/v2](https://redirect.github.com/grpc-ecosystem/grpc-gateway) | `v2.28.0` → `v2.29.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgrpc-ecosystem%2fgrpc-gateway%2fv2/v2.29.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgrpc-ecosystem%2fgrpc-gateway%2fv2/v2.28.0/v2.29.0?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/5322) for more information. --- ### Release Notes <details> <summary>grpc-ecosystem/grpc-gateway (github.com/grpc-ecosystem/grpc-gateway/v2)</summary> ### [`v2.29.0`](https://redirect.github.com/grpc-ecosystem/grpc-gateway/releases/tag/v2.29.0) [Compare Source](https://redirect.github.com/grpc-ecosystem/grpc-gateway/compare/v2.28.0...v2.29.0) #### What's Changed - fix: use proto.Merge to avoid copylocks with use\_opaque\_api=true by [@emahiro](https://redirect.github.com/emahiro) in [#6383](https://redirect.github.com/grpc-ecosystem/grpc-gateway/pull/6383) - fix: allow proto3 optional fields in path parameters by [@susanachl](https://redirect.github.com/susanachl) in [#6416](https://redirect.github.com/grpc-ecosystem/grpc-gateway/pull/6416) - Add option to disable HTTP method override by [@achew22](https://redirect.github.com/achew22) in [#6447](https://redirect.github.com/grpc-ecosystem/grpc-gateway/pull/6447) - Add Go documentation badge to README by [@achew22](https://redirect.github.com/achew22) in [#6448](https://redirect.github.com/grpc-ecosystem/grpc-gateway/pull/6448) - fix: add missing return statements in error handler paths by [@jet-go](https://redirect.github.com/jet-go) in [#6561](https://redirect.github.com/grpc-ecosystem/grpc-gateway/pull/6561) - Deprecate fields and methods if file is deprecated by [@aidandj](https://redirect.github.com/aidandj) in [#6613](https://redirect.github.com/grpc-ecosystem/grpc-gateway/pull/6613) - Add edition 2024 support by [@printfn](https://redirect.github.com/printfn) in [#6622](https://redirect.github.com/grpc-ecosystem/grpc-gateway/pull/6622) #### New Contributors - [@emahiro](https://redirect.github.com/emahiro) made their first contribution in [#6383](https://redirect.github.com/grpc-ecosystem/grpc-gateway/pull/6383) - [@susanachl](https://redirect.github.com/susanachl) made their first contribution in [#6416](https://redirect.github.com/grpc-ecosystem/grpc-gateway/pull/6416) - [@jet-go](https://redirect.github.com/jet-go) made their first contribution in [#6561](https://redirect.github.com/grpc-ecosystem/grpc-gateway/pull/6561) - [@aidandj](https://redirect.github.com/aidandj) made their first contribution in [#6613](https://redirect.github.com/grpc-ecosystem/grpc-gateway/pull/6613) - [@printfn](https://redirect.github.com/printfn) made their first contribution in [#6622](https://redirect.github.com/grpc-ecosystem/grpc-gateway/pull/6622) **Full Changelog**: <grpc-ecosystem/grpc-gateway@v2.28.0...v2.29.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

…emetry#8080) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [codecov/codecov-action](https://redirect.github.com/codecov/codecov-action) | action | patch | `v5.5.2` → `v5.5.3` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..open-telemetry/issues/5322) for more information. --- ### Release Notes <details> <summary>codecov/codecov-action (codecov/codecov-action)</summary> ### [`v5.5.3`](https://redirect.github.com/codecov/codecov-action/releases/tag/v5.5.3) [Compare Source](https://redirect.github.com/codecov/codecov-action/compare/v5.5.2...v5.5.3) ##### What's Changed - build(deps): bump actions/github-script from 7.0.1 to 8.0.0 by [@&open-telemetry#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&open-telemetry#8203;1874](https://redirect.github.com/codecov/codecov-action/pull/1874) - chore(release): bump to 5.5.3 by [@&open-telemetry#8203;thomasrockhu-codecov](https://redirect.github.com/thomasrockhu-codecov) in [#&open-telemetry#8203;1922](https://redirect.github.com/codecov/codecov-action/pull/1922) **Full Changelog**: <codecov/codecov-action@v5.5.2...v5.5.3> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

…to v1.54.0 (open-telemetry#8085) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [go.opentelemetry.io/collector/featuregate](https://redirect.github.com/open-telemetry/opentelemetry-collector) | `v1.53.0` → `v1.54.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fcollector%2ffeaturegate/v1.54.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fcollector%2ffeaturegate/v1.53.0/v1.54.0?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..open-telemetry/issues/5322) for more information. --- ### Release Notes <details> <summary>open-telemetry/opentelemetry-collector (go.opentelemetry.io/collector/featuregate)</summary> ### [`v1.54.0`](https://redirect.github.com/open-telemetry/opentelemetry-collector/blob/HEAD/CHANGELOG.md#v1540v01480) ##### ❗ Known Issues ❗ - `service`: The collector's internal Prometheus metrics endpoint (`:8888`) now emits OTel service labels with underscore names (`service_name`, `service_instance_id`, `service_version`) instead of dot-notation names (`service.name`, `service.instance.id`, `service.version`). Users scraping this endpoint with the Prometheus receiver will see these renamed labels in resource and datapoint attributes. As a workaround, add the following `metric_relabel_configs` to your scrape config in prometheus receiver: ```yaml metric_relabel_configs: - source_labels: [service_name] target_label: service.name - source_labels: [service_instance_id] target_label: service.instance.id - source_labels: [service_version] target_label: service.version - regex: service_name|service_instance_id|service_version action: labeldrop ``` See [#&open-telemetry#8203;14814](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14814) for details and updates. ##### 🛑 Breaking changes 🛑 - `all`: Change metric units to be singular to match OTel specification, e.g. `{requests}` -> `{request}` ([#&open-telemetry#8203;14753](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14753)) ##### 💡 Enhancements 💡 - `cmd/mdatagen`: Add deprecated\_type field to allow specifying an alias for component types. ([#&open-telemetry#8203;14718](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14718)) - `cmd/mdatagen`: Generate entity-scoped MetricsBuilder API that enforces entity-metric associations at compile time ([#&open-telemetry#8203;14659](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14659)) - `cmd/mdatagen`: Skip generating reaggregation config options for metrics that have no aggregatable attributes. ([#&open-telemetry#8203;14689](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14689)) - `pkg/service`: The internal status reporter no longer drops repeated Ok and RecoverableError statuses ([#&open-telemetry#8203;14282](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14282)) Status events can now carry metadata and there's value in allowing them to be emitted despite the status value itself not changing. ##### 🧰 Bug fixes 🧰 - `cmd/builder`: Add `.exe` to output binary names when building for Windows targets. ([#&open-telemetry#8203;12591](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/12591)) - `exporter/debug`: Add printing of metric metadata in detailed verbosity. ([#&open-telemetry#8203;14667](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14667)) - `exporter/otlp_grpc`: Prevent nil pointer panic when push methods are called before the OTLP exporter initializes its gRPC clients. ([#&open-telemetry#8203;14663](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14663)) When the sending queue and retry are disabled, calling ConsumeTraces, ConsumeMetrics, ConsumeLogs, or ConsumeProfiles before the OTLP exporter initializes its gRPC clients could cause a nil pointer dereference panic. The push methods now return an error instead of panicking. - `exporter/otlp_http`: Show the actual destination URL in error messages when request URL is modified by middleware. ([#&open-telemetry#8203;14673](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14673)) Unwraps the `*url.Error` returned by `http.Client.Do()` to prevent misleading error logs when a middleware extension dynamically updates the endpoint. - `pdata/pprofile`: Switch the dictionary of dictionary tables entries only once when merging profiles ([#&open-telemetry#8203;14709](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14709)) For dictionary table data, we used to switch their dictionaries when doing the switch for the data that uses them. However, when an entry is associated with multiple other data (several samples can use the same stack), we would have been switching the dictionaries of the entry multiple times. We now switch dictionaries for dictionary table data only once, before switching the resource profiles.  </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

…pen-telemetry#8081) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/ProtonMail/go-crypto](https://redirect.github.com/ProtonMail/go-crypto) | `v1.4.0` → `v1.4.1` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fProtonMail%2fgo-crypto/v1.4.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fProtonMail%2fgo-crypto/v1.4.0/v1.4.1?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..open-telemetry/issues/5322) for more information. --- ### Release Notes <details> <summary>ProtonMail/go-crypto (github.com/ProtonMail/go-crypto)</summary> ### [`v1.4.1`](https://redirect.github.com/ProtonMail/go-crypto/releases/tag/v1.4.1) [Compare Source](https://redirect.github.com/ProtonMail/go-crypto/compare/v1.4.0...v1.4.1) ##### What's Changed - Properly handle ECC keys with invalid points in [#&open-telemetry#8203;304](https://redirect.github.com/ProtonMail/go-crypto/pull/304) **Full Changelog**: <ProtonMail/go-crypto@v1.4.0...v1.4.1> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

….0 (open-telemetry#8086) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [go.opentelemetry.io/collector/pdata](https://redirect.github.com/open-telemetry/opentelemetry-collector) | `v1.53.0` → `v1.54.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fcollector%2fpdata/v1.54.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fcollector%2fpdata/v1.53.0/v1.54.0?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..open-telemetry/issues/5322) for more information. --- ### Release Notes <details> <summary>open-telemetry/opentelemetry-collector (go.opentelemetry.io/collector/pdata)</summary> ### [`v1.54.0`](https://redirect.github.com/open-telemetry/opentelemetry-collector/blob/HEAD/CHANGELOG.md#v1540v01480) ##### ❗ Known Issues ❗ - `service`: The collector's internal Prometheus metrics endpoint (`:8888`) now emits OTel service labels with underscore names (`service_name`, `service_instance_id`, `service_version`) instead of dot-notation names (`service.name`, `service.instance.id`, `service.version`). Users scraping this endpoint with the Prometheus receiver will see these renamed labels in resource and datapoint attributes. As a workaround, add the following `metric_relabel_configs` to your scrape config in prometheus receiver: ```yaml metric_relabel_configs: - source_labels: [service_name] target_label: service.name - source_labels: [service_instance_id] target_label: service.instance.id - source_labels: [service_version] target_label: service.version - regex: service_name|service_instance_id|service_version action: labeldrop ``` See [#&open-telemetry#8203;14814](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14814) for details and updates. ##### 🛑 Breaking changes 🛑 - `all`: Change metric units to be singular to match OTel specification, e.g. `{requests}` -> `{request}` ([#&open-telemetry#8203;14753](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14753)) ##### 💡 Enhancements 💡 - `cmd/mdatagen`: Add deprecated\_type field to allow specifying an alias for component types. ([#&open-telemetry#8203;14718](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14718)) - `cmd/mdatagen`: Generate entity-scoped MetricsBuilder API that enforces entity-metric associations at compile time ([#&open-telemetry#8203;14659](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14659)) - `cmd/mdatagen`: Skip generating reaggregation config options for metrics that have no aggregatable attributes. ([#&open-telemetry#8203;14689](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14689)) - `pkg/service`: The internal status reporter no longer drops repeated Ok and RecoverableError statuses ([#&open-telemetry#8203;14282](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14282)) Status events can now carry metadata and there's value in allowing them to be emitted despite the status value itself not changing. ##### 🧰 Bug fixes 🧰 - `cmd/builder`: Add `.exe` to output binary names when building for Windows targets. ([#&open-telemetry#8203;12591](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/12591)) - `exporter/debug`: Add printing of metric metadata in detailed verbosity. ([#&open-telemetry#8203;14667](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14667)) - `exporter/otlp_grpc`: Prevent nil pointer panic when push methods are called before the OTLP exporter initializes its gRPC clients. ([#&open-telemetry#8203;14663](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14663)) When the sending queue and retry are disabled, calling ConsumeTraces, ConsumeMetrics, ConsumeLogs, or ConsumeProfiles before the OTLP exporter initializes its gRPC clients could cause a nil pointer dereference panic. The push methods now return an error instead of panicking. - `exporter/otlp_http`: Show the actual destination URL in error messages when request URL is modified by middleware. ([#&open-telemetry#8203;14673](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14673)) Unwraps the `*url.Error` returned by `http.Client.Do()` to prevent misleading error logs when a middleware extension dynamically updates the endpoint. - `pdata/pprofile`: Switch the dictionary of dictionary tables entries only once when merging profiles ([#&open-telemetry#8203;14709](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14709)) For dictionary table data, we used to switch their dictionaries when doing the switch for the data that uses them. However, when an entry is associated with multiple other data (several samples can use the same stack), we would have been switching the dictionaries of the entry multiple times. We now switch dictionaries for dictionary table data only once, before switching the resource profiles.  </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

…open-telemetry#8075) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [google.golang.org/grpc](https://redirect.github.com/grpc/grpc-go) | `v1.79.2` → `v1.79.3` | ![age](https://developer.mend.io/api/mc/badges/age/go/google.golang.org%2fgrpc/v1.79.3?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/google.golang.org%2fgrpc/v1.79.2/v1.79.3?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..open-telemetry/issues/5322) for more information. ### GitHub Vulnerability Alerts #### [CVE-2026-33186](https://redirect.github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3) ### Impact _What kind of vulnerability is it? Who is impacted?_ It is an **Authorization Bypass** resulting from **Improper Input Validation** of the HTTP/2 `:path` pseudo-header. The gRPC-Go server was too lenient in its routing logic, accepting requests where the `:path` omitted the mandatory leading slash (e.g., `Service/Method` instead of `/Service/Method`). While the server successfully routed these requests to the correct handler, authorization interceptors (including the official `grpc/authz` package) evaluated the raw, non-canonical path string. Consequently, "deny" rules defined using canonical paths (starting with `/`) failed to match the incoming request, allowing it to bypass the policy if a fallback "allow" rule was present. **Who is impacted?** This affects gRPC-Go servers that meet both of the following criteria: 1. They use path-based authorization interceptors, such as the official RBAC implementation in `google.golang.org/grpc/authz` or custom interceptors relying on `info.FullMethod` or `grpc.Method(ctx)`. 2. Their security policy contains specific "deny" rules for canonical paths but allows other requests by default (a fallback "allow" rule). The vulnerability is exploitable by an attacker who can send raw HTTP/2 frames with malformed `:path` headers directly to the gRPC server. ### Patches _Has the problem been patched? What versions should users upgrade to?_ Yes, the issue has been patched. The fix ensures that any request with a `:path` that does not start with a leading slash is immediately rejected with a `codes.Unimplemented` error, preventing it from reaching authorization interceptors or handlers with a non-canonical path string. Users should upgrade to the following versions (or newer): * **v1.79.3** * The latest **master** branch. It is recommended that all users employing path-based authorization (especially `grpc/authz`) upgrade as soon as the patch is available in a tagged release. ### Workarounds _Is there a way for users to fix or remediate the vulnerability without upgrading?_ While upgrading is the most secure and recommended path, users can mitigate the vulnerability using one of the following methods: #### 1. Use a Validating Interceptor (Recommended Mitigation) Add an "outermost" interceptor to your server that validates the path before any other authorization logic runs: ```go func pathValidationInterceptor(ctx context.Context, req any, info *grpc.UnaryServerInfo, handler grpc.UnaryHandler) (any, error) { if info.FullMethod == "" || info.FullMethod[0] != '/' { return nil, status.Errorf(codes.Unimplemented, "malformed method name") } return handler(ctx, req) } // Ensure this is the FIRST interceptor in your chain s := grpc.NewServer( grpc.ChainUnaryInterceptor(pathValidationInterceptor, authzInterceptor), ) ``` #### 2. Infrastructure-Level Normalization If your gRPC server is behind a reverse proxy or load balancer (such as Envoy, NGINX, or an L7 Cloud Load Balancer), ensure it is configured to enforce strict HTTP/2 compliance for pseudo-headers and reject or normalize requests where the `:path` header does not start with a leading slash. #### 3. Policy Hardening Switch to a "default deny" posture in your authorization policies (explicitly listing all allowed paths and denying everything else) to reduce the risk of bypasses via malformed inputs. --- ### Release Notes <details> <summary>grpc/grpc-go (google.golang.org/grpc)</summary> ### [`v1.79.3`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.79.3): Release 1.79.3 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.79.2...v1.79.3) ### Security - server: fix an authorization bypass where malformed :path headers (missing the leading slash) could bypass path-based restricted "deny" rules in interceptors like `grpc/authz`. Any request with a non-canonical path is now immediately rejected with an `Unimplemented` error. ([#&open-telemetry#8203;8981](https://redirect.github.com/grpc/grpc-go/issues/8981)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

…ry#8089) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [CodSpeedHQ/action](https://redirect.github.com/CodSpeedHQ/action) | action | minor | `v4.11.1` → `v4.12.1` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..open-telemetry/issues/5322) for more information. --- ### Release Notes <details> <summary>CodSpeedHQ/action (CodSpeedHQ/action)</summary> ### [`v4.12.1`](https://redirect.github.com/CodSpeedHQ/action/releases/tag/v4.12.1) [Compare Source](https://redirect.github.com/CodSpeedHQ/action/compare/v4.11.1...v4.12.1) #### Release Notes In this release, we've focused on improving the local user experience.\ We've revamped the output of the cli to provide tailed logs while the benchmarks are being executed, and polished a bit the display of results after your run. We also added support to run multiple modes in a single command invocation, both for local and CI runs!\ For instance, that means you can now do `codspeed run --mode simulation --mode memory --mode walltime -- cargo codspeed run` Last but not least, you can now define `entrypoints` in your project config ```yaml # codspeed.yml # List of commands that are run when running `codspeed run` without further arguments benchmarks: - name: My ls command # Mutually exclusive with entrypoint # Expects a command that will run a benchmark for an arbitrary command exec: ls -al /usr/bin - name: My pytest-codspeed benchmark # Mutually exclusive with exec # Expects a command that will run a benchmark program that is using a codspeed integration entrypoint: pytest --codspeed src ``` Fix a bug where memory profiling with `codspeed exec` for binaries that use statically-linked allocators (e.g. jemalloc in Rust). Previously, we reported incorrect memory usage because it didn't attach to the statically linked allocators. #### Details ##### 🚀 Features - Set NODE\_OPTIONS to get perf map from node by [@&open-telemetry#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) in [#&open-telemetry#8203;267](https://redirect.github.com/CodSpeedHQ/runner/pull/267) - Disable node instrospection for exec-harness by [@&open-telemetry#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Support CODSPEED\_MEMTRACK\_BINARIES for static allocator discovery by [@&open-telemetry#8203;not-matthias](https://redirect.github.com/not-matthias) - Gracefully handle logs from the runner while rolling buffer is active by [@&open-telemetry#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Add `--show-full-output` to bypass the new rolling buffer by [@&open-telemetry#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Add a spinner while waiting for results by [@&open-telemetry#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Clean up group headers and emoji usage, make the executor title not dim after run by [@&open-telemetry#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Add rolling buffer to display logs from executors by [@&open-telemetry#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Polish impact reporting and upload feedback by [@&open-telemetry#8203;art049](https://redirect.github.com/art049) - Add color-coded metrics to benchmark result tables by [@&open-telemetry#8203;art049](https://redirect.github.com/art049) - Enhance local logger with richer visual hierarchy by [@&open-telemetry#8203;art049](https://redirect.github.com/art049) - Style the ASCII banner with CodSpeed orange by [@&open-telemetry#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Enforce CodSpeed CLI as single source of truth for all measurements by [@&open-telemetry#8203;art049](https://redirect.github.com/art049) - Add optimize and setup-harness skills by [@&open-telemetry#8203;art049](https://redirect.github.com/art049) - Add the cursor plugin by [@&open-telemetry#8203;art049](https://redirect.github.com/art049) - Check if user is logged in before doing a local run by [@&open-telemetry#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) in [#&open-telemetry#8203;263](https://redirect.github.com/CodSpeedHQ/runner/pull/263) - Skip respository resolve with `--skip-upload` by [@&open-telemetry#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Use an enum and fix schema for entry/entrypoint by [@&open-telemetry#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) in [#&open-telemetry#8203;260](https://redirect.github.com/CodSpeedHQ/runner/pull/260) - Accept a mix of entrypoint and exec targets in project config by [@&open-telemetry#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Introduce OrchestratorConfig and ExecutorConfig by [@&open-telemetry#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Unify run\_part\_id suffix computation between ci providers and local by [@&open-telemetry#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Add the claude plugin by [@&open-telemetry#8203;art049](https://redirect.github.com/art049) - Add local\_data to upload metadata by [@&open-telemetry#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Use repositoryOverview resolver rather than repository by [@&open-telemetry#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) ##### 🐛 Bug Fixes - Use fp unwinding mode when running `go test` by [@&open-telemetry#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) in [#&open-telemetry#8203;269](https://redirect.github.com/CodSpeedHQ/runner/pull/269) - Improve error message when no benchmarks are found by [@&open-telemetry#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) in [#&open-telemetry#8203;264](https://redirect.github.com/CodSpeedHQ/runner/pull/264) ##### 🏗️ Refactor - Extract shared test helpers for compile and track by [@&open-telemetry#8203;not-matthias](https://redirect.github.com/not-matthias) - Pass extra env via config instead of unsafe set\_var by [@&open-telemetry#8203;not-matthias](https://redirect.github.com/not-matthias) - Remove the closure argument to poll in favor of polling options by [@&open-telemetry#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Move EXEC\_HARNESS\_VERSION and EXEC\_HARNESS\_COMMAND to orchestrator mod by [@&open-telemetry#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Flatten orchestrator execution loop over (command, mode) pairs by [@&open-telemetry#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Introduce Orchestrator to support multi-mode execution by [@&open-telemetry#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) in [#&open-telemetry#8203;259](https://redirect.github.com/CodSpeedHQ/runner/pull/259) - Consolidate poll\_results into upload module by [@&open-telemetry#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) ##### 📚 Documentation - docs: add documentation about multiple modes in a single run by [@&open-telemetry#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) in [#&open-telemetry#8203;195](https://redirect.github.com/CodSpeedHQ/action/pull/195) ##### 🧪 Testing - Add spawn wrapper integration test for static allocator discovery by [@&open-telemetry#8203;not-matthias](https://redirect.github.com/not-matthias) in [#&open-telemetry#8203;266](https://redirect.github.com/CodSpeedHQ/runner/pull/266) ##### ⚙️ Internals - Bump linux-perf-data to use upstream version by [@&open-telemetry#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) in [#&open-telemetry#8203;271](https://redirect.github.com/CodSpeedHQ/runner/pull/271) - Remove lazy\_static in favor of LazyLock by [@&open-telemetry#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) in [#&open-telemetry#8203;265](https://redirect.github.com/CodSpeedHQ/runner/pull/265) - Rename skill directories with codspeed prefix by [@&open-telemetry#8203;art049](https://redirect.github.com/art049) - Move architecture docs out of this repo by [@&open-telemetry#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) in [#&open-telemetry#8203;262](https://redirect.github.com/CodSpeedHQ/runner/pull/262) - Typo in plugin description by [@&open-telemetry#8203;art049](https://redirect.github.com/art049) - Bump memtrack version - chore: bump runner version to 4.12.0 by [@&open-telemetry#8203;github-actions](https://redirect.github.com/github-actions)\[bot] in [#&open-telemetry#8203;194](https://redirect.github.com/CodSpeedHQ/action/pull/194) - chore: bump runner version to 4.12.1 by [@&open-telemetry#8203;github-actions](https://redirect.github.com/github-actions)\[bot] in [#&open-telemetry#8203;196](https://redirect.github.com/CodSpeedHQ/action/pull/196) #### Install codspeed-runner 4.12.1 ##### Install prebuilt binaries via shell script ```sh curl --proto '=https' --tlsv1.2 -LsSf https://github.com/CodSpeedHQ/codspeed/releases/download/v4.12.1/codspeed-runner-installer.sh | sh ``` #### Download codspeed-runner 4.12.1 | File | Platform | Checksum | | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------- | ------------------------------------------------------------------------------------------------------------------------------------- | | [codspeed-runner-aarch64-unknown-linux-musl.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.12.1/codspeed-runner-aarch64-unknown-linux-musl.tar.gz) | ARM64 MUSL Linux | [checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.12.1/codspeed-runner-aarch64-unknown-linux-musl.tar.gz.sha256) | | [codspeed-runner-x86\_64-unknown-linux-musl.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.12.1/codspeed-runner-x86_64-unknown-linux-musl.tar.gz) | x64 MUSL Linux | [checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.12.1/codspeed-runner-x86_64-unknown-linux-musl.tar.gz.sha256) | **Full Runner Changelog**: <https://github.com/CodSpeedHQ/codspeed/blob/main/CHANGELOG.md> **Full Changelog**: <CodSpeedHQ/action@v4.11.1...v4.12.1> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

…metry#8090) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github/codeql-action](https://redirect.github.com/github/codeql-action) | action | patch | `v4.34.0` → `v4.34.1` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..open-telemetry/issues/5322) for more information. --- ### Release Notes <details> <summary>github/codeql-action (github/codeql-action)</summary> ### [`v4.34.1`](https://redirect.github.com/github/codeql-action/releases/tag/v4.34.1) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.34.0...v4.34.1) - Downgrade default CodeQL bundle version to [2.24.3](https://redirect.github.com/github/codeql-action/releases/tag/codeql-bundle-v2.24.3) due to issues with a small percentage of Actions and JavaScript analyses. [#&open-telemetry#8203;3762](https://redirect.github.com/github/codeql-action/pull/3762) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

…telemetry#8040) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/sonatard/noctx](https://redirect.github.com/sonatard/noctx) | `v0.5.0` → `v0.5.1` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fsonatard%2fnoctx/v0.5.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fsonatard%2fnoctx/v0.5.0/v0.5.1?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..open-telemetry/issues/5322) for more information. --- ### Release Notes <details> <summary>sonatard/noctx (github.com/sonatard/noctx)</summary> ### [`v0.5.1`](https://redirect.github.com/sonatard/noctx/releases/tag/v0.5.1) [Compare Source](https://redirect.github.com/sonatard/noctx/compare/v0.5.0...v0.5.1) #### Changelog - [`00a6009`](https://redirect.github.com/sonatard/noctx/commit/00a60094e8643655c5e1e2fdeb4f8bfcc096d8d0) Merge pull request [#&open-telemetry#8203;52](https://redirect.github.com/sonatard/noctx/issues/52) from sonatard/fix-release - [`1166346`](https://redirect.github.com/sonatard/noctx/commit/11663463cf24b731fcae80ec7370ae0a18d7389a) Remove windows/arm </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

…telemetry#8046) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/download-artifact](https://redirect.github.com/actions/download-artifact) | action | patch | `v8.0.0` → `v8.0.1` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..open-telemetry/issues/5322) for more information. --- ### Release Notes <details> <summary>actions/download-artifact (actions/download-artifact)</summary> ### [`v8.0.1`](https://redirect.github.com/actions/download-artifact/releases/tag/v8.0.1) [Compare Source](https://redirect.github.com/actions/download-artifact/compare/v8.0.0...v8.0.1) ##### What's Changed - Support for CJK characters in the artifact name by [@&open-telemetry#8203;danwkennedy](https://redirect.github.com/danwkennedy) in [#&open-telemetry#8203;471](https://redirect.github.com/actions/download-artifact/pull/471) - Add a regression test for artifact name + content-type mismatches by [@&open-telemetry#8203;danwkennedy](https://redirect.github.com/danwkennedy) in [#&open-telemetry#8203;472](https://redirect.github.com/actions/download-artifact/pull/472) **Full Changelog**: <actions/download-artifact@v8...v8.0.1> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

…#8061) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [otel/weaver](https://redirect.github.com/open-telemetry/weaver) | stage | patch | `v0.22.0` → `v0.22.1` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..open-telemetry/issues/5322) for more information. --- ### Release Notes <details> <summary>open-telemetry/weaver (otel/weaver)</summary> ### [`v0.22.1`](https://redirect.github.com/open-telemetry/weaver/releases/tag/v0.22.1): 0.22.1 - 2026-03-13 [Compare Source](https://redirect.github.com/open-telemetry/weaver/compare/v0.22.0...v0.22.1) #### Release Notes *Note: 0.22.0 release was skipped due to release CI/CD issues.* - Fix: Update release workflow for pnpm migration (use pnpm lockfile instead of npm lockfile). ([#&open-telemetry#8203;1289](https://redirect.github.com/open-telemetry/weaver/pull/1289) by [@&open-telemetry#8203;jerbly](https://redirect.github.com/jerbly)) - Add support for git references in the registry url ([#&open-telemetry#8203;182](https://redirect.github.com/open-telemetry/weaver/issues/182) by [@&open-telemetry#8203;sebasnabas](https://redirect.github.com/sebasnabas)) - New feature ([#&open-telemetry#8203;1153](https://redirect.github.com/open-telemetry/weaver/issues/1153)) - Live-check now has a `/health` endpoint that can be used in long-running scenarios to confirm readiness and liveness of the live-check server. ([#&open-telemetry#8203;1193](https://redirect.github.com/open-telemetry/weaver/pull/1193) by [@&open-telemetry#8203;jerbly](https://redirect.github.com/jerbly)) - New feature ([#&open-telemetry#8203;1100](https://redirect.github.com/open-telemetry/weaver/issues/1100)) - Set `--output=http` to have live-check send its report as the response to `/stop`. ([#&open-telemetry#8203;1193](https://redirect.github.com/open-telemetry/weaver/pull/1193) by [@&open-telemetry#8203;jerbly](https://redirect.github.com/jerbly)) - Unified output handling across all registry subcommands. Builtin output formats (json, yaml, jsonl) are now available in `registry stats`, `registry diff`, and `registry resolve`. `registry stats` also supports `--templates` for custom text output templates. ([#&open-telemetry#8203;1200](https://redirect.github.com/open-telemetry/weaver/pull/1200) by [@&open-telemetry#8203;jerbly](https://redirect.github.com/jerbly)) - New feature ([#&open-telemetry#8203;1152](https://redirect.github.com/open-telemetry/weaver/issues/1152)) - Live-check with `--emit-otlp-logs` will now include the attributes from the resource in the emitted log record, this helps to identify the source of the finding in a multi-source environment. ([#&open-telemetry#8203;1206](https://redirect.github.com/open-telemetry/weaver/pull/1206) by [@&open-telemetry#8203;jerbly](https://redirect.github.com/jerbly)) - New Experimental feature: `weaver registry infer` command that listens for OTLP telemetry and infers a semantic convention registry file from the received data. Supports spans, metrics, events, and resource attributes. Includes configurable gRPC address/port, admin server for graceful shutdown, and inactivity timeout. ([#&open-telemetry#8203;1138](https://redirect.github.com/open-telemetry/weaver/pull/1138) by [@&open-telemetry#8203;ArthurSens](https://redirect.github.com/ArthurSens)) - Fix: Include unit in inferred schema even if empty to prevent live-check failures. ([#&open-telemetry#8203;1284](https://redirect.github.com/open-telemetry/weaver/pull/1284) by [@&open-telemetry#8203;ArthurSens](https://redirect.github.com/ArthurSens)) - Use `schema_url` in registry manifest, dependencies, and resolved schema instead of `registry_url`. Parse registry name and version from it. ([#&open-telemetry#8203;1202](https://redirect.github.com/open-telemetry/weaver/pull/1202) by [@&open-telemetry#8203;lmolkova](https://redirect.github.com/lmolkova)) - Default to `manifest.yaml` for registry manifest file, deprecate `registry_manifest.yaml` and add warning when it's used. ([#&open-telemetry#8203;1202](https://redirect.github.com/open-telemetry/weaver/pull/1202) by [@&open-telemetry#8203;lmolkova](https://redirect.github.com/lmolkova)) - 💥 BREAKING CHANGE 💥 (Fixes [#&open-telemetry#8203;760](https://redirect.github.com/open-telemetry/weaver/issues/760)) - Auto-escaping is now off by default (`none`) for all templates, regardless of file extension. To opt in, set `auto_escape: html` or `auto_escape: json` per template in `weaver.yaml`. Within a template, `{% autoescape false %}` blocks can selectively disable escaping for sections. Use `|tojson` for explicit JSON/YAML value escaping where needed. ([#&open-telemetry#8203;1239](https://redirect.github.com/open-telemetry/weaver/pull/1239) by [@&open-telemetry#8203;jerbly](https://redirect.github.com/jerbly)) - 💥 BREAKING CHANGE 💥 Replace `version: "2"` with `file_format: definition/2` for v2 definition schema ([#&open-telemetry#8203;1154](https://redirect.github.com/open-telemetry/weaver/pull/1154) by [@&open-telemetry#8203;lmolkova](https://redirect.github.com/lmolkova)) - Add JSON schema for resolved registry v2 ([#&open-telemetry#8203;1261](https://redirect.github.com/open-telemetry/weaver/pull/1261) by [@&open-telemetry#8203;lmolkova](https://redirect.github.com/lmolkova)) - Add `weaver registry package` command to generate manifest and write resolved schema. ([#&open-telemetry#8203;1254](https://redirect.github.com/open-telemetry/weaver/pull/1254) by [@&open-telemetry#8203;lmolkova](https://redirect.github.com/lmolkova)) - Fix: `weaver registry package` command not producing output due to warnings. ([#&open-telemetry#8203;1271](https://redirect.github.com/open-telemetry/weaver/pull/1271) by [@&open-telemetry#8203;lmolkova](https://redirect.github.com/lmolkova)) - Update JSON Schema v2 to include `file_format` ([#&open-telemetry#8203;1262](https://redirect.github.com/open-telemetry/weaver/pull/1262) by [@&open-telemetry#8203;lmolkova](https://redirect.github.com/lmolkova)) - Add JSON schema for `PolicyFinding`, make `context` field optional. ([#&open-telemetry#8203;1270](https://redirect.github.com/open-telemetry/weaver/pull/1270) by [@&open-telemetry#8203;lmolkova](https://redirect.github.com/lmolkova)) - Deprecate `weaver registry resolve` command, please use `weaver registry generate` or `package` instead ([#&open-telemetry#8203;1255](https://redirect.github.com/open-telemetry/weaver/pull/1255) by [@&open-telemetry#8203;lmolkova](https://redirect.github.com/lmolkova)) - Support `imports` for all signal types and public attribute groups in v2 registry. ([#&open-telemetry#8203;1267](https://redirect.github.com/open-telemetry/weaver/pull/1267) by [@&open-telemetry#8203;jsuereth](https://redirect.github.com/jsuereth)) - Support refinements in v2 syntax: metric names, notes, etc. are now copied from the refined group. ([#&open-telemetry#8203;1250](https://redirect.github.com/open-telemetry/weaver/pull/1250) by [@&open-telemetry#8203;jsuereth](https://redirect.github.com/jsuereth)) - Fix stability/ordering issues in v2 publishing; attributes are now sorted and deduplicated consistently. ([#&open-telemetry#8203;1282](https://redirect.github.com/open-telemetry/weaver/pull/1282) by [@&open-telemetry#8203;jsuereth](https://redirect.github.com/jsuereth)) - Fix resolution for dependencies: both v1 and v2 resolution now returns the correct attribute from the right registry when using dependencies. ([#&open-telemetry#8203;1280](https://redirect.github.com/open-telemetry/weaver/pull/1280) by [@&open-telemetry#8203;lmolkova](https://redirect.github.com/lmolkova)) - JQ helper v2 for spans: fixes and improvements. ([#&open-telemetry#8203;1251](https://redirect.github.com/open-telemetry/weaver/pull/1251) by [@&open-telemetry#8203;lmolkova](https://redirect.github.com/lmolkova)) - Fix 404 on template-type attributes in the `weaver serve` API. ([#&open-telemetry#8203;1240](https://redirect.github.com/open-telemetry/weaver/pull/1240) by [@&open-telemetry#8203;jerbly](https://redirect.github.com/jerbly)) - New Experimental feature: `weaver serve` UI migrated to React. ([#&open-telemetry#8203;1147](https://redirect.github.com/open-telemetry/weaver/pull/1147) by [@&open-telemetry#8203;nicolastakashi](https://redirect.github.com/nicolastakashi)) #### Install weaver 0.22.1 ##### Install prebuilt binaries via shell script ```sh curl --proto '=https' --tlsv1.2 -LsSf https://github.com/open-telemetry/weaver/releases/download/v0.22.1/weaver-installer.sh | sh ``` ##### Install prebuilt binaries via powershell script ```sh powershell -ExecutionPolicy Bypass -c "irm https://github.com/open-telemetry/weaver/releases/download/v0.22.1/weaver-installer.ps1 | iex" ``` #### Download weaver 0.22.1 | File | Platform | Checksum | | ---------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------- | ---------------------------------------------------------------------------------------------------------------------------- | | [weaver-aarch64-apple-darwin.tar.xz](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.22.1/weaver-aarch64-apple-darwin.tar.xz) | Apple Silicon macOS | [checksum](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.22.1/weaver-aarch64-apple-darwin.tar.xz.sha256) | | [weaver-x86\_64-apple-darwin.tar.xz](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.22.1/weaver-x86_64-apple-darwin.tar.xz) | Intel macOS | [checksum](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.22.1/weaver-x86_64-apple-darwin.tar.xz.sha256) | | [weaver-x86\_64-pc-windows-msvc.zip](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.22.1/weaver-x86_64-pc-windows-msvc.zip) | x64 Windows | [checksum](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.22.1/weaver-x86_64-pc-windows-msvc.zip.sha256) | | [weaver-x86\_64-pc-windows-msvc.msi](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.22.1/weaver-x86_64-pc-windows-msvc.msi) | x64 Windows | [checksum](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.22.1/weaver-x86_64-pc-windows-msvc.msi.sha256) | | [weaver-x86\_64-unknown-linux-gnu.tar.xz](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.22.1/weaver-x86_64-unknown-linux-gnu.tar.xz) | x64 Linux | [checksum](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.22.1/weaver-x86_64-unknown-linux-gnu.tar.xz.sha256) | #### Verifying GitHub Artifact Attestations The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the [GitHub CLI](https://cli.github.com/manual/gh_attestation_verify): ```sh gh attestation verify <file-path of downloaded artifact> --repo open-telemetry/weaver ``` You can also download the attestation from [GitHub](https://redirect.github.com/open-telemetry/weaver/attestations) and verify against that directly: ```sh gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation> ``` </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

…pen-telemetry#8014) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/jgautheron/goconst](https://redirect.github.com/jgautheron/goconst) | `v1.8.2` → `v1.9.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fjgautheron%2fgoconst/v1.9.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fjgautheron%2fgoconst/v1.8.2/v1.9.0?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..open-telemetry/issues/5322) for more information. --- ### Release Notes <details> <summary>jgautheron/goconst (github.com/jgautheron/goconst)</summary> ### [`v1.9.0`](https://redirect.github.com/jgautheron/goconst/releases/tag/v1.9.0) [Compare Source](https://redirect.github.com/jgautheron/goconst/compare/v1.8.2...v1.9.0) #### What's Changed - fix(visitor): detect repeated literals inside composite literal elements by [@&open-telemetry#8203;TobyTheHutt](https://redirect.github.com/TobyTheHutt) in [#&open-telemetry#8203;46](https://redirect.github.com/jgautheron/goconst/pull/46) - ci(go): align module and workflow Go versions by [@&open-telemetry#8203;TobyTheHutt](https://redirect.github.com/TobyTheHutt) in [#&open-telemetry#8203;48](https://redirect.github.com/jgautheron/goconst/pull/48) - fix(visitor): record string occurrence for accurate position reporting by [@&open-telemetry#8203;TobyTheHutt](https://redirect.github.com/TobyTheHutt) in [#&open-telemetry#8203;49](https://redirect.github.com/jgautheron/goconst/pull/49) #### New Contributors - [@&open-telemetry#8203;TobyTheHutt](https://redirect.github.com/TobyTheHutt) made their first contribution in [#&open-telemetry#8203;46](https://redirect.github.com/jgautheron/goconst/pull/46) **Full Changelog**: <jgautheron/goconst@v1.8.2...v1.9.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [CodSpeedHQ/action](https://redirect.github.com/CodSpeedHQ/action) | action | minor | `v4.13.1` → `v4.14.0` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/5322) for more information. --- ### Release Notes <details> <summary>CodSpeedHQ/action (CodSpeedHQ/action)</summary> ### [`v4.14.0`](https://redirect.github.com/CodSpeedHQ/action/releases/tag/v4.14.0) [Compare Source](https://redirect.github.com/CodSpeedHQ/action/compare/v4.13.1...v4.14.0) #### Release Notes We now collect buildtime and runtime environment data to warn users about differences in their runtime environment when comparing two runs against one another. This data includes toolchain metadata like version and build options, as well as a list of dynamically loaded linked libraries. ##### Minimum integration versions To support the runtime metadata collection, make sure to use at least the following versions: - [`pytest-codspeed` v4.4.0](https://redirect.github.com/CodSpeedHQ/pytest-codspeed/releases/tag/v4.4.0) - [`codspeed-rust` v4.5.0](https://redirect.github.com/CodSpeedHQ/codspeed-rust/releases/tag/v4.5.0) - [`codspeed-cpp` v2.2.0](https://redirect.github.com/CodSpeedHQ/codspeed-cpp/releases/tag/v2.2.0) - [`codspeed-go` v1.1.0](https://redirect.github.com/CodSpeedHQ/codspeed-go/releases/tag/v1.1.0) - [`codspeed-node` v5.3.0](https://redirect.github.com/CodSpeedHQ/codspeed-node/releases/tag/v5.3.0) ##### 🚀 Features - Stop panicking when parsing invalid perf file by [@GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) in [#298](https://redirect.github.com/CodSpeedHQ/runner/pull/298) - Make the basic run only 5 rounds to make logs not crash the github page by [@GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Represent the host OS as a SupportedOs enum with per-executor support gates by [@GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Bypass systemd-run usage on macos by [@GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Add aarch64-apple-darwin to the release targets by [@GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Collect cpu flags in system info by [@GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) in [#281](https://redirect.github.com/CodSpeedHQ/runner/pull/281) ##### 🐛 Bug Fixes - Fix instropected\_go's behavior on macos by [@GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Update rust crate git2 to 0.20.4 ([#284](https://redirect.github.com/CodSpeedHQ/action/issues/284)) by [@xtqqczze](https://redirect.github.com/xtqqczze) in [#284](https://redirect.github.com/CodSpeedHQ/runner/pull/284) ##### ⚙️ Internals - chore: bump runner version to 4.14.0 by [@github-actions](https://redirect.github.com/github-actions)\[bot] in [#203](https://redirect.github.com/CodSpeedHQ/action/pull/203) - Move the config schema check from pre-commit to ci-only check by [@GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) in [#287](https://redirect.github.com/CodSpeedHQ/runner/pull/287) - Skip tests that rely on linux behavior by [@GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Bump instrument-hooks submodule to include stubs improvement by [@GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Rerun exec harness build if instrument hooks sources change by [@GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Make update-bindings.sh PWD agnostic by [@GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) #### Install codspeed-runner 4.14.0 ##### Install prebuilt binaries via shell script ```sh curl --proto '=https' --tlsv1.2 -LsSf https://github.com/CodSpeedHQ/codspeed/releases/download/v4.14.0/codspeed-runner-installer.sh | sh ``` #### Download codspeed-runner 4.14.0 | File | Platform | Checksum | | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------- | ------------------------------------------------------------------------------------------------------------------------------------- | | [codspeed-runner-aarch64-apple-darwin.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.14.0/codspeed-runner-aarch64-apple-darwin.tar.gz) | Apple Silicon macOS | [checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.14.0/codspeed-runner-aarch64-apple-darwin.tar.gz.sha256) | | [codspeed-runner-aarch64-unknown-linux-musl.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.14.0/codspeed-runner-aarch64-unknown-linux-musl.tar.gz) | ARM64 MUSL Linux | [checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.14.0/codspeed-runner-aarch64-unknown-linux-musl.tar.gz.sha256) | | [codspeed-runner-x86\_64-unknown-linux-musl.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.14.0/codspeed-runner-x86_64-unknown-linux-musl.tar.gz) | x64 MUSL Linux | [checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.14.0/codspeed-runner-x86_64-unknown-linux-musl.tar.gz.sha256) | **Full Runner Changelog**: <https://github.com/CodSpeedHQ/codspeed/blob/main/CHANGELOG.md> **Full Changelog**: <CodSpeedHQ/action@v4.13.1...v4.14.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [go.opentelemetry.io/build-tools/crosslink](https://redirect.github.com/open-telemetry/opentelemetry-go-build-tools) | `v0.29.0` → `v0.30.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fbuild-tools%2fcrosslink/v0.30.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fbuild-tools%2fcrosslink/v0.29.0/v0.30.0?slim=true) | | [go.opentelemetry.io/build-tools/gotmpl](https://redirect.github.com/open-telemetry/opentelemetry-go-build-tools) | `v0.29.0` → `v0.30.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fbuild-tools%2fgotmpl/v0.30.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fbuild-tools%2fgotmpl/v0.29.0/v0.30.0?slim=true) | | [go.opentelemetry.io/build-tools/multimod](https://redirect.github.com/open-telemetry/opentelemetry-go-build-tools) | `v0.29.0` → `v0.30.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fbuild-tools%2fmultimod/v0.30.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fbuild-tools%2fmultimod/v0.29.0/v0.30.0?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/5322) for more information. --- ### Release Notes <details> <summary>open-telemetry/opentelemetry-go-build-tools (go.opentelemetry.io/build-tools/crosslink)</summary> ### [`v0.30.0`](https://redirect.github.com/open-telemetry/opentelemetry-go-build-tools/blob/HEAD/CHANGELOG.md#v0300) [Compare Source](https://redirect.github.com/open-telemetry/opentelemetry-go-build-tools/compare/v0.29.0...v0.30.0) ##### 🛑 Breaking changes 🛑 - `all`: Bump minimum Go version to 1.25 ([#1587](https://redirect.github.com/open-telemetry/opentelemetry-go-build-tools/issues/1587)) - `githubgen`: Stop generating the .github/ALLOWLIST file ([#1505](https://redirect.github.com/open-telemetry/opentelemetry-go-build-tools/issues/1505)) This file has no bearing to GitHub, the CODEOWNERS file already contains a list of unmaintained components. Further, this file is flagged incorrectly by security tools as problematic. ##### 💡 Enhancements 💡 - `chloggen`: Update validate command to check all changelog entries and not exit out immediately after finding error. ([#1304](https://redirect.github.com/open-telemetry/opentelemetry-go-build-tools/issues/1304)) - `crosslink`: Support Go versions with patch numbers (e.g., 1.23.0) in `crosslink work` command ([#1499](https://redirect.github.com/open-telemetry/opentelemetry-go-build-tools/issues/1499)) ##### 🧰 Bug fixes 🧰 - `chloggen`: Correctly handle absolute paths for config file, entries\_dir, template\_yaml, and change\_logs. ([#1387](https://redirect.github.com/open-telemetry/opentelemetry-go-build-tools/issues/1387)) - `crosslink`: Fix false negatives in `crosslink tidylist --validate` ([#1437](https://redirect.github.com/open-telemetry/opentelemetry-go-build-tools/issues/1437)) - `githubgen`: Replace panic with proper error handling for unknown generator arguments ([#1549](https://redirect.github.com/open-telemetry/opentelemetry-go-build-tools/issues/1549)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [otel/weaver](https://redirect.github.com/open-telemetry/weaver) | stage | minor | `v0.22.1` → `v0.23.0` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/5322) for more information. --- ### Release Notes <details> <summary>open-telemetry/weaver (otel/weaver)</summary> ### [`v0.23.0`](https://redirect.github.com/open-telemetry/weaver/releases/tag/v0.23.0): 0.23.0 - 2026-04-22 [Compare Source](https://redirect.github.com/open-telemetry/weaver/compare/v0.22.1...v0.23.0) #### Release Notes - New feature ([#1247](https://redirect.github.com/open-telemetry/weaver/issues/1247), [#1248](https://redirect.github.com/open-telemetry/weaver/issues/1248)) - `.weaver.toml` project configuration file for `live-check`. Covers all `live-check` CLI flags plus `[[live_check.finding_filters]]` for dropping findings by ID, minimum level, sample name, and signal type. CLI flags take precedence over config values. Use `--config` or auto-discovery from CWD. ([#1256](https://redirect.github.com/open-telemetry/weaver/pull/1256) by [@jerbly](https://redirect.github.com/jerbly)) - Fix attribute catalog sorting for attributes with the same key when converting from v1 to v2 catalog. ([#1359](https://redirect.github.com/open-telemetry/weaver/pull/1359) by [@michaelvanstraten](https://redirect.github.com/michaelvanstraten)) - Fix ([#1323](https://redirect.github.com/open-telemetry/weaver/issues/1323)) - Live-check: treat observed `int` as compatible with expected `double` attribute type, avoiding false violations from OTLP serializers (e.g. JS) that emit `int_value` for integral numbers. ([#1331](https://redirect.github.com/open-telemetry/weaver/pull/1331) by [@jerbly](https://redirect.github.com/jerbly)) - Fix CLI so it doesn't error out early when loading a resolved schema. ([#1304](https://redirect.github.com/open-telemetry/weaver/pull/1304) by [@jsuereth](https://redirect.github.com/jsuereth)) - 💥 BREAKING CHANGE 💥 Use `schema_url` to track registries consistently in lineage / provenance ([#1298](https://redirect.github.com/open-telemetry/weaver/pull/1298) by [@jsuereth](https://redirect.github.com/jsuereth)) - Publish and document missing JSON schemas. Add `head_schema_url`/`baseline_schema_url` to diff v2. ([#1106](https://redirect.github.com/open-telemetry/weaver/pull/1106) by [@lmolkova](https://redirect.github.com/lmolkova)) - Add `--allow-git-credentials` global flag to enable system credential helpers (e.g. `osxkeychain`, `git-credential-manager`) when cloning private registries. By default, git operations remain isolated for security. ([#1306](https://redirect.github.com/open-telemetry/weaver/pull/1306) by [@jerbly](https://redirect.github.com/jerbly)) - MCP: Add `browse_namespace` tool and `findings_only` output mode for `live_check`. Add configurable namespace separator via `--namespace-separator`. ([#1324](https://redirect.github.com/open-telemetry/weaver/pull/1324) by [@jerbly](https://redirect.github.com/jerbly)) - chore(deps): update all patch versions. ([#1379](https://redirect.github.com/open-telemetry/weaver/pull/1379) by [@renovate](https://redirect.github.com/renovate)\[bot]) - Remove vendored openssl dependency. ([#1380](https://redirect.github.com/open-telemetry/weaver/pull/1380) by [@sapatrjv](https://redirect.github.com/sapatrjv)) #### Install weaver 0.23.0 ##### Install prebuilt binaries via shell script ```sh curl --proto '=https' --tlsv1.2 -LsSf https://github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-installer.sh | sh ``` ##### Install prebuilt binaries via powershell script ```sh powershell -ExecutionPolicy Bypass -c "irm https://github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-installer.ps1 | iex" ``` #### Download weaver 0.23.0 | File | Platform | Checksum | | ------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------- | ------------------------------------------------------------------------------------------------------------------------------ | | [weaver-aarch64-apple-darwin.tar.xz](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-aarch64-apple-darwin.tar.xz) | Apple Silicon macOS | [checksum](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-aarch64-apple-darwin.tar.xz.sha256) | | [weaver-x86\_64-apple-darwin.tar.xz](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-x86_64-apple-darwin.tar.xz) | Intel macOS | [checksum](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-x86_64-apple-darwin.tar.xz.sha256) | | [weaver-x86\_64-pc-windows-msvc.zip](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-x86_64-pc-windows-msvc.zip) | x64 Windows | [checksum](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-x86_64-pc-windows-msvc.zip.sha256) | | [weaver-x86\_64-pc-windows-msvc.msi](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-x86_64-pc-windows-msvc.msi) | x64 Windows | [checksum](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-x86_64-pc-windows-msvc.msi.sha256) | | [weaver-aarch64-unknown-linux-gnu.tar.xz](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-aarch64-unknown-linux-gnu.tar.xz) | ARM64 Linux | [checksum](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-aarch64-unknown-linux-gnu.tar.xz.sha256) | | [weaver-x86\_64-unknown-linux-gnu.tar.xz](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-x86_64-unknown-linux-gnu.tar.xz) | x64 Linux | [checksum](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-x86_64-unknown-linux-gnu.tar.xz.sha256) | | [weaver-aarch64-unknown-linux-musl.tar.xz](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-aarch64-unknown-linux-musl.tar.xz) | ARM64 MUSL Linux | [checksum](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-aarch64-unknown-linux-musl.tar.xz.sha256) | | [weaver-x86\_64-unknown-linux-musl.tar.xz](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-x86_64-unknown-linux-musl.tar.xz) | x64 MUSL Linux | [checksum](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-x86_64-unknown-linux-musl.tar.xz.sha256) | #### Verifying GitHub Artifact Attestations The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the [GitHub CLI](https://cli.github.com/manual/gh_attestation_verify): ```sh gh attestation verify <file-path of downloaded artifact> --repo open-telemetry/weaver ``` You can also download the attestation from [GitHub](https://redirect.github.com/open-telemetry/weaver/attestations) and verify against that directly: ```sh gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation> ``` </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

open-telemetry#8180) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/ashanbrown/makezero/v2](https://redirect.github.com/ashanbrown/makezero) | `v2.1.0` → `v2.2.1` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fashanbrown%2fmakezero%2fv2/v2.2.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fashanbrown%2fmakezero%2fv2/v2.1.0/v2.2.1?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..open-telemetry/issues/5322) for more information. --- ### Release Notes <details> <summary>ashanbrown/makezero (github.com/ashanbrown/makezero/v2)</summary> ### [`v2.2.1`](https://redirect.github.com/ashanbrown/makezero/releases/tag/v2.2.1): Require a minimum of one package [Compare Source](https://redirect.github.com/ashanbrown/makezero/compare/v2.2.0...v2.2.1) Suggestion from [@&open-telemetry#8203;m-ocean-it](https://redirect.github.com/m-ocean-it) ([#&open-telemetry#8203;24](https://redirect.github.com/ashanbrown/makezero/pull/24)) ### [`v2.2.0`](https://redirect.github.com/ashanbrown/makezero/releases/tag/v2.2.0): Add support for slice type alises [Compare Source](https://redirect.github.com/ashanbrown/makezero/compare/v2.1.0...v2.2.0) ### Added - Support slice type aliases per [#&open-telemetry#8203;25](https://redirect.github.com/ashanbrown/makezero/pull/25). Thanks [@&open-telemetry#8203;RyabovNick](https://redirect.github.com/RyabovNick) . </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

….1 (open-telemetry#8182) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/ashanbrown/forbidigo/v2](https://redirect.github.com/ashanbrown/forbidigo) | `v2.3.0` → `v2.3.1` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fashanbrown%2fforbidigo%2fv2/v2.3.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fashanbrown%2fforbidigo%2fv2/v2.3.0/v2.3.1?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..open-telemetry/issues/5322) for more information. --- ### Release Notes <details> <summary>ashanbrown/forbidigo (github.com/ashanbrown/forbidigo/v2)</summary> ### [`v2.3.1`](https://redirect.github.com/ashanbrown/forbidigo/releases/tag/v2.3.1) [Compare Source](https://redirect.github.com/ashanbrown/forbidigo/compare/v2.3.0...v2.3.1) switch from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 ([#&open-telemetry#8203;66](https://redirect.github.com/ashanbrown/forbidigo/pull/66)) Thanks [@&open-telemetry#8203;scop](https://redirect.github.com/scop) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

….0 (open-telemetry#8184) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [go.opentelemetry.io/collector/pdata](https://redirect.github.com/open-telemetry/opentelemetry-collector) | `v1.55.0` → `v1.56.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fcollector%2fpdata/v1.56.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fcollector%2fpdata/v1.55.0/v1.56.0?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..open-telemetry/issues/5322) for more information. --- ### Release Notes <details> <summary>open-telemetry/opentelemetry-collector (go.opentelemetry.io/collector/pdata)</summary> ### [`v1.56.0`](https://redirect.github.com/open-telemetry/opentelemetry-collector/blob/HEAD/CHANGELOG.md#v1560v01500) ##### 💡 Enhancements 💡 - `all`: Update semconv package from 1.38.0 to 1.40.0 ([#&open-telemetry#8203;15095](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/15095)) - `cmd/mdatagen`: Only allow the `ToVersion` feature flag attribute to be set for the `Stable` and `Deprecated` stages. ([#&open-telemetry#8203;15040](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/15040)) To better match the feature flag README (<https://github.com/open-telemetry/opentelemetry-collector/blob/main/featuregate/README.md#feature-lifecycle>). ##### 🧰 Bug fixes 🧰 - `exporter/debug`: Guard from out of bounds profiles dictionary indices ([#&open-telemetry#8203;14803](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14803)) - `pdata/pprofile`: create a copy when the input is marked as read-only ([#&open-telemetry#8203;15080](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/15080)) - `pkg/otelcol`: Fix missing default values in unredacted print-config command by introducing confmap.WithUnredacted MarshalOption. ([#&open-telemetry#8203;14750](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14750)) Resolves an issue where the unredacted mode output omitted all default-valued options. By introducing a new MarshalOption to disable redaction directly at the confmap encoding level, the unredacted mode now preserves all component defaults natively without requiring post-processing. - `pkg/service`: Headers on the internal telemetry OTLP exporter are now redacted when the configuration is marshaled ([#&open-telemetry#8203;14756](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14756))  </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/cache](https://redirect.github.com/actions/cache) | action | patch | `v5.0.4` → `v5.0.5` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..open-telemetry/issues/5322) for more information. --- ### Release Notes <details> <summary>actions/cache (actions/cache)</summary> ### [`v5.0.5`](https://redirect.github.com/actions/cache/releases/tag/v5.0.5) [Compare Source](https://redirect.github.com/actions/cache/compare/v5.0.4...v5.0.5) ##### What's Changed - Update ts-http-runtime dependency by [@&open-telemetry#8203;yacaovsnc](https://redirect.github.com/yacaovsnc) in [#&open-telemetry#8203;1747](https://redirect.github.com/actions/cache/pull/1747) **Full Changelog**: <actions/cache@v5...v5.0.5> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

…metry#8208) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github/codeql-action](https://redirect.github.com/github/codeql-action) | action | patch | `v4.35.1` → `v4.35.2` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..open-telemetry/issues/5322) for more information. --- ### Release Notes <details> <summary>github/codeql-action (github/codeql-action)</summary> ### [`v4.35.2`](https://redirect.github.com/github/codeql-action/releases/tag/v4.35.2) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.35.1...v4.35.2) - The undocumented TRAP cache cleanup feature that could be enabled using the `CODEQL_ACTION_CLEANUP_TRAP_CACHES` environment variable is deprecated and will be removed in May 2026. If you are affected by this, we recommend disabling TRAP caching by passing the `trap-caching: false` input to the `init` Action. [#&open-telemetry#8203;3795](https://redirect.github.com/github/codeql-action/pull/3795) - The Git version 2.36.0 requirement for improved incremental analysis now only applies to repositories that contain submodules. [#&open-telemetry#8203;3789](https://redirect.github.com/github/codeql-action/pull/3789) - Python analysis on GHES no longer extracts the standard library, relying instead on models of the standard library. This should result in significantly faster extraction and analysis times, while the effect on alerts should be minimal. [#&open-telemetry#8203;3794](https://redirect.github.com/github/codeql-action/pull/3794) - Fixed a bug in the validation of OIDC configurations for private registries that was added in CodeQL Action 4.33.0 / 3.33.0. [#&open-telemetry#8203;3807](https://redirect.github.com/github/codeql-action/pull/3807) - Update default CodeQL bundle version to [2.25.2](https://redirect.github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.2). [#&open-telemetry#8203;3823](https://redirect.github.com/github/codeql-action/pull/3823) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

…en-telemetry#8223) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/go-git/go-git/v5](https://redirect.github.com/go-git/go-git) | `v5.17.2` → `v5.18.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgo-git%2fgo-git%2fv5/v5.18.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgo-git%2fgo-git%2fv5/v5.17.2/v5.18.0?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..open-telemetry/issues/5322) for more information. --- ### Release Notes <details> <summary>go-git/go-git (github.com/go-git/go-git/v5)</summary> ### [`v5.18.0`](https://redirect.github.com/go-git/go-git/releases/tag/v5.18.0) [Compare Source](https://redirect.github.com/go-git/go-git/compare/v5.17.2...v5.18.0) #### What's Changed - plumbing: transport/http, Add support for followRedirects policy by [@&open-telemetry#8203;pjbgf](https://redirect.github.com/pjbgf) in [#&open-telemetry#8203;2004](https://redirect.github.com/go-git/go-git/pull/2004) **Full Changelog**: <go-git/go-git@v5.17.2...v5.18.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

…ry#8234) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [CodSpeedHQ/action](https://redirect.github.com/CodSpeedHQ/action) | action | minor | `v4.13.1` → `v4.14.0` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..open-telemetry/issues/5322) for more information. --- ### Release Notes <details> <summary>CodSpeedHQ/action (CodSpeedHQ/action)</summary> ### [`v4.14.0`](https://redirect.github.com/CodSpeedHQ/action/releases/tag/v4.14.0) [Compare Source](https://redirect.github.com/CodSpeedHQ/action/compare/v4.13.1...v4.14.0) #### Release Notes We now collect buildtime and runtime environment data to warn users about differences in their runtime environment when comparing two runs against one another. This data includes toolchain metadata like version and build options, as well as a list of dynamically loaded linked libraries. ##### Minimum integration versions To support the runtime metadata collection, make sure to use at least the following versions: - [`pytest-codspeed` v4.4.0](https://redirect.github.com/CodSpeedHQ/pytest-codspeed/releases/tag/v4.4.0) - [`codspeed-rust` v4.5.0](https://redirect.github.com/CodSpeedHQ/codspeed-rust/releases/tag/v4.5.0) - [`codspeed-cpp` v2.2.0](https://redirect.github.com/CodSpeedHQ/codspeed-cpp/releases/tag/v2.2.0) - [`codspeed-go` v1.1.0](https://redirect.github.com/CodSpeedHQ/codspeed-go/releases/tag/v1.1.0) - [`codspeed-node` v5.3.0](https://redirect.github.com/CodSpeedHQ/codspeed-node/releases/tag/v5.3.0) ##### 🚀 Features - Stop panicking when parsing invalid perf file by [@&open-telemetry#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) in [#&open-telemetry#8203;298](https://redirect.github.com/CodSpeedHQ/runner/pull/298) - Make the basic run only 5 rounds to make logs not crash the github page by [@&open-telemetry#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Represent the host OS as a SupportedOs enum with per-executor support gates by [@&open-telemetry#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Bypass systemd-run usage on macos by [@&open-telemetry#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Add aarch64-apple-darwin to the release targets by [@&open-telemetry#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Collect cpu flags in system info by [@&open-telemetry#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) in [#&open-telemetry#8203;281](https://redirect.github.com/CodSpeedHQ/runner/pull/281) ##### 🐛 Bug Fixes - Fix instropected\_go's behavior on macos by [@&open-telemetry#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Update rust crate git2 to 0.20.4 ([#&open-telemetry#8203;284](https://redirect.github.com/CodSpeedHQ/action/issues/284)) by [@&open-telemetry#8203;xtqqczze](https://redirect.github.com/xtqqczze) in [#&open-telemetry#8203;284](https://redirect.github.com/CodSpeedHQ/runner/pull/284) ##### ⚙️ Internals - chore: bump runner version to 4.14.0 by [@&open-telemetry#8203;github-actions](https://redirect.github.com/github-actions)\[bot] in [#&open-telemetry#8203;203](https://redirect.github.com/CodSpeedHQ/action/pull/203) - Move the config schema check from pre-commit to ci-only check by [@&open-telemetry#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) in [#&open-telemetry#8203;287](https://redirect.github.com/CodSpeedHQ/runner/pull/287) - Skip tests that rely on linux behavior by [@&open-telemetry#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Bump instrument-hooks submodule to include stubs improvement by [@&open-telemetry#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Rerun exec harness build if instrument hooks sources change by [@&open-telemetry#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Make update-bindings.sh PWD agnostic by [@&open-telemetry#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) #### Install codspeed-runner 4.14.0 ##### Install prebuilt binaries via shell script ```sh curl --proto '=https' --tlsv1.2 -LsSf https://github.com/CodSpeedHQ/codspeed/releases/download/v4.14.0/codspeed-runner-installer.sh | sh ``` #### Download codspeed-runner 4.14.0 | File | Platform | Checksum | | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------- | ------------------------------------------------------------------------------------------------------------------------------------- | | [codspeed-runner-aarch64-apple-darwin.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.14.0/codspeed-runner-aarch64-apple-darwin.tar.gz) | Apple Silicon macOS | [checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.14.0/codspeed-runner-aarch64-apple-darwin.tar.gz.sha256) | | [codspeed-runner-aarch64-unknown-linux-musl.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.14.0/codspeed-runner-aarch64-unknown-linux-musl.tar.gz) | ARM64 MUSL Linux | [checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.14.0/codspeed-runner-aarch64-unknown-linux-musl.tar.gz.sha256) | | [codspeed-runner-x86\_64-unknown-linux-musl.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.14.0/codspeed-runner-x86_64-unknown-linux-musl.tar.gz) | x64 MUSL Linux | [checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.14.0/codspeed-runner-x86_64-unknown-linux-musl.tar.gz.sha256) | **Full Runner Changelog**: <https://github.com/CodSpeedHQ/codspeed/blob/main/CHANGELOG.md> **Full Changelog**: <CodSpeedHQ/action@v4.13.1...v4.14.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [go.opentelemetry.io/build-tools/crosslink](https://redirect.github.com/open-telemetry/opentelemetry-go-build-tools) | `v0.29.0` → `v0.30.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fbuild-tools%2fcrosslink/v0.30.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fbuild-tools%2fcrosslink/v0.29.0/v0.30.0?slim=true) | | [go.opentelemetry.io/build-tools/gotmpl](https://redirect.github.com/open-telemetry/opentelemetry-go-build-tools) | `v0.29.0` → `v0.30.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fbuild-tools%2fgotmpl/v0.30.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fbuild-tools%2fgotmpl/v0.29.0/v0.30.0?slim=true) | | [go.opentelemetry.io/build-tools/multimod](https://redirect.github.com/open-telemetry/opentelemetry-go-build-tools) | `v0.29.0` → `v0.30.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fbuild-tools%2fmultimod/v0.30.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fbuild-tools%2fmultimod/v0.29.0/v0.30.0?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..open-telemetry/issues/5322) for more information. --- ### Release Notes <details> <summary>open-telemetry/opentelemetry-go-build-tools (go.opentelemetry.io/build-tools/crosslink)</summary> ### [`v0.30.0`](https://redirect.github.com/open-telemetry/opentelemetry-go-build-tools/blob/HEAD/CHANGELOG.md#v0300) [Compare Source](https://redirect.github.com/open-telemetry/opentelemetry-go-build-tools/compare/v0.29.0...v0.30.0) ##### 🛑 Breaking changes 🛑 - `all`: Bump minimum Go version to 1.25 ([#&open-telemetry#8203;1587](https://redirect.github.com/open-telemetry/opentelemetry-go-build-tools/issues/1587)) - `githubgen`: Stop generating the .github/ALLOWLIST file ([#&open-telemetry#8203;1505](https://redirect.github.com/open-telemetry/opentelemetry-go-build-tools/issues/1505)) This file has no bearing to GitHub, the CODEOWNERS file already contains a list of unmaintained components. Further, this file is flagged incorrectly by security tools as problematic. ##### 💡 Enhancements 💡 - `chloggen`: Update validate command to check all changelog entries and not exit out immediately after finding error. ([#&open-telemetry#8203;1304](https://redirect.github.com/open-telemetry/opentelemetry-go-build-tools/issues/1304)) - `crosslink`: Support Go versions with patch numbers (e.g., 1.23.0) in `crosslink work` command ([#&open-telemetry#8203;1499](https://redirect.github.com/open-telemetry/opentelemetry-go-build-tools/issues/1499)) ##### 🧰 Bug fixes 🧰 - `chloggen`: Correctly handle absolute paths for config file, entries\_dir, template\_yaml, and change\_logs. ([#&open-telemetry#8203;1387](https://redirect.github.com/open-telemetry/opentelemetry-go-build-tools/issues/1387)) - `crosslink`: Fix false negatives in `crosslink tidylist --validate` ([#&open-telemetry#8203;1437](https://redirect.github.com/open-telemetry/opentelemetry-go-build-tools/issues/1437)) - `githubgen`: Replace panic with proper error handling for unknown generator arguments ([#&open-telemetry#8203;1549](https://redirect.github.com/open-telemetry/opentelemetry-go-build-tools/issues/1549)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

…#8255) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [otel/weaver](https://redirect.github.com/open-telemetry/weaver) | stage | minor | `v0.22.1` → `v0.23.0` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..open-telemetry/issues/5322) for more information. --- ### Release Notes <details> <summary>open-telemetry/weaver (otel/weaver)</summary> ### [`v0.23.0`](https://redirect.github.com/open-telemetry/weaver/releases/tag/v0.23.0): 0.23.0 - 2026-04-22 [Compare Source](https://redirect.github.com/open-telemetry/weaver/compare/v0.22.1...v0.23.0) #### Release Notes - New feature ([#&open-telemetry#8203;1247](https://redirect.github.com/open-telemetry/weaver/issues/1247), [#&open-telemetry#8203;1248](https://redirect.github.com/open-telemetry/weaver/issues/1248)) - `.weaver.toml` project configuration file for `live-check`. Covers all `live-check` CLI flags plus `[[live_check.finding_filters]]` for dropping findings by ID, minimum level, sample name, and signal type. CLI flags take precedence over config values. Use `--config` or auto-discovery from CWD. ([#&open-telemetry#8203;1256](https://redirect.github.com/open-telemetry/weaver/pull/1256) by [@&open-telemetry#8203;jerbly](https://redirect.github.com/jerbly)) - Fix attribute catalog sorting for attributes with the same key when converting from v1 to v2 catalog. ([#&open-telemetry#8203;1359](https://redirect.github.com/open-telemetry/weaver/pull/1359) by [@&open-telemetry#8203;michaelvanstraten](https://redirect.github.com/michaelvanstraten)) - Fix ([#&open-telemetry#8203;1323](https://redirect.github.com/open-telemetry/weaver/issues/1323)) - Live-check: treat observed `int` as compatible with expected `double` attribute type, avoiding false violations from OTLP serializers (e.g. JS) that emit `int_value` for integral numbers. ([#&open-telemetry#8203;1331](https://redirect.github.com/open-telemetry/weaver/pull/1331) by [@&open-telemetry#8203;jerbly](https://redirect.github.com/jerbly)) - Fix CLI so it doesn't error out early when loading a resolved schema. ([#&open-telemetry#8203;1304](https://redirect.github.com/open-telemetry/weaver/pull/1304) by [@&open-telemetry#8203;jsuereth](https://redirect.github.com/jsuereth)) - 💥 BREAKING CHANGE 💥 Use `schema_url` to track registries consistently in lineage / provenance ([#&open-telemetry#8203;1298](https://redirect.github.com/open-telemetry/weaver/pull/1298) by [@&open-telemetry#8203;jsuereth](https://redirect.github.com/jsuereth)) - Publish and document missing JSON schemas. Add `head_schema_url`/`baseline_schema_url` to diff v2. ([#&open-telemetry#8203;1106](https://redirect.github.com/open-telemetry/weaver/pull/1106) by [@&open-telemetry#8203;lmolkova](https://redirect.github.com/lmolkova)) - Add `--allow-git-credentials` global flag to enable system credential helpers (e.g. `osxkeychain`, `git-credential-manager`) when cloning private registries. By default, git operations remain isolated for security. ([#&open-telemetry#8203;1306](https://redirect.github.com/open-telemetry/weaver/pull/1306) by [@&open-telemetry#8203;jerbly](https://redirect.github.com/jerbly)) - MCP: Add `browse_namespace` tool and `findings_only` output mode for `live_check`. Add configurable namespace separator via `--namespace-separator`. ([#&open-telemetry#8203;1324](https://redirect.github.com/open-telemetry/weaver/pull/1324) by [@&open-telemetry#8203;jerbly](https://redirect.github.com/jerbly)) - chore(deps): update all patch versions. ([#&open-telemetry#8203;1379](https://redirect.github.com/open-telemetry/weaver/pull/1379) by [@&open-telemetry#8203;renovate](https://redirect.github.com/renovate)\[bot]) - Remove vendored openssl dependency. ([#&open-telemetry#8203;1380](https://redirect.github.com/open-telemetry/weaver/pull/1380) by [@&open-telemetry#8203;sapatrjv](https://redirect.github.com/sapatrjv)) #### Install weaver 0.23.0 ##### Install prebuilt binaries via shell script ```sh curl --proto '=https' --tlsv1.2 -LsSf https://github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-installer.sh | sh ``` ##### Install prebuilt binaries via powershell script ```sh powershell -ExecutionPolicy Bypass -c "irm https://github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-installer.ps1 | iex" ``` #### Download weaver 0.23.0 | File | Platform | Checksum | | ------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------- | ------------------------------------------------------------------------------------------------------------------------------ | | [weaver-aarch64-apple-darwin.tar.xz](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-aarch64-apple-darwin.tar.xz) | Apple Silicon macOS | [checksum](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-aarch64-apple-darwin.tar.xz.sha256) | | [weaver-x86\_64-apple-darwin.tar.xz](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-x86_64-apple-darwin.tar.xz) | Intel macOS | [checksum](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-x86_64-apple-darwin.tar.xz.sha256) | | [weaver-x86\_64-pc-windows-msvc.zip](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-x86_64-pc-windows-msvc.zip) | x64 Windows | [checksum](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-x86_64-pc-windows-msvc.zip.sha256) | | [weaver-x86\_64-pc-windows-msvc.msi](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-x86_64-pc-windows-msvc.msi) | x64 Windows | [checksum](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-x86_64-pc-windows-msvc.msi.sha256) | | [weaver-aarch64-unknown-linux-gnu.tar.xz](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-aarch64-unknown-linux-gnu.tar.xz) | ARM64 Linux | [checksum](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-aarch64-unknown-linux-gnu.tar.xz.sha256) | | [weaver-x86\_64-unknown-linux-gnu.tar.xz](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-x86_64-unknown-linux-gnu.tar.xz) | x64 Linux | [checksum](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-x86_64-unknown-linux-gnu.tar.xz.sha256) | | [weaver-aarch64-unknown-linux-musl.tar.xz](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-aarch64-unknown-linux-musl.tar.xz) | ARM64 MUSL Linux | [checksum](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-aarch64-unknown-linux-musl.tar.xz.sha256) | | [weaver-x86\_64-unknown-linux-musl.tar.xz](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-x86_64-unknown-linux-musl.tar.xz) | x64 MUSL Linux | [checksum](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-x86_64-unknown-linux-musl.tar.xz.sha256) | #### Verifying GitHub Artifact Attestations The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the [GitHub CLI](https://cli.github.com/manual/gh_attestation_verify): ```sh gh attestation verify <file-path of downloaded artifact> --repo open-telemetry/weaver ``` You can also download the attestation from [GitHub](https://redirect.github.com/open-telemetry/weaver/attestations) and verify against that directly: ```sh gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation> ``` </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

…8262) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/sourcegraph/go-diff](https://redirect.github.com/sourcegraph/go-diff) | `v0.7.0` → `v0.8.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fsourcegraph%2fgo-diff/v0.8.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fsourcegraph%2fgo-diff/v0.7.0/v0.8.0?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/5322) for more information. --- ### Release Notes <details> <summary>sourcegraph/go-diff (github.com/sourcegraph/go-diff)</summary> ### [`v0.8.0`](https://redirect.github.com/sourcegraph/go-diff/releases/tag/v0.8.0) [Compare Source](https://redirect.github.com/sourcegraph/go-diff/compare/v0.7.0...v0.8.0) #### What's Changed - remove unnecessary dependencies by [@yuxiang-zhang](https://redirect.github.com/yuxiang-zhang) in [#69](https://redirect.github.com/sourcegraph/go-diff/pull/69) - Make strict dropCR behavior optional via ParseOptions by [@EmmanuelAC1](https://redirect.github.com/EmmanuelAC1) in [#78](https://redirect.github.com/sourcegraph/go-diff/pull/78) - Add new functionaltiy for reversing diffs. by [@vslashg](https://redirect.github.com/vslashg) in [#72](https://redirect.github.com/sourcegraph/go-diff/pull/72) **Full Changelog**: <sourcegraph/go-diff@v0.7.0...v0.8.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

…n-telemetry#6959) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [github.com/bombsimon/wsl/v5](https://redirect.github.com/bombsimon/wsl) | `v5.0.0` -> `v5.1.0` | [![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fbombsimon%2fwsl%2fv5/v5.1.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/go/github.com%2fbombsimon%2fwsl%2fv5/v5.1.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/go/github.com%2fbombsimon%2fwsl%2fv5/v5.0.0/v5.1.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fbombsimon%2fwsl%2fv5/v5.0.0/v5.1.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>bombsimon/wsl (github.com/bombsimon/wsl/v5)</summary> ### [`v5.1.0`](https://redirect.github.com/bombsimon/wsl/releases/tag/v5.1.0) [Compare Source](https://redirect.github.com/bombsimon/wsl/compare/v5.0.0...v5.1.0) #### What's Changed - tests: rename wsl\_test to analyzer\_test by [@&open-telemetry#8203;ldez](https://redirect.github.com/ldez) in [https://github.com/bombsimon/wsl/pull/182](https://redirect.github.com/bombsimon/wsl/pull/182) - Make error checking more laxed by [@&open-telemetry#8203;bombsimon](https://redirect.github.com/bombsimon) in [https://github.com/bombsimon/wsl/pull/184](https://redirect.github.com/bombsimon/wsl/pull/184) **Full Changelog**: bombsimon/wsl@v5.0.0...v5.1.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

This PR contains the following updates: | Package | Change | Age | Confidence | |---|---|---|---| | [go.opentelemetry.io/build-tools/crosslink](https://redirect.github.com/open-telemetry/opentelemetry-go-build-tools) | `v0.23.1` -> `v0.24.0` | [![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fbuild-tools%2fcrosslink/v0.24.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fbuild-tools%2fcrosslink/v0.23.1/v0.24.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | | [go.opentelemetry.io/build-tools/multimod](https://redirect.github.com/open-telemetry/opentelemetry-go-build-tools) | `v0.23.1` -> `v0.24.0` | [![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fbuild-tools%2fmultimod/v0.24.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fbuild-tools%2fmultimod/v0.23.1/v0.24.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>open-telemetry/opentelemetry-go-build-tools (go.opentelemetry.io/build-tools/crosslink)</summary> ### [`v0.24.0`](https://redirect.github.com/open-telemetry/opentelemetry-go-build-tools/blob/HEAD/CHANGELOG.md#v0240) [Compare Source](https://redirect.github.com/open-telemetry/opentelemetry-go-build-tools/compare/v0.23.1...v0.24.0) ##### 🛑 Breaking changes 🛑 - `multimod`: Default to attempting pre-releasing all module sets. ([#&open-telemetry#8203;992](https://redirect.github.com/open-telemetry/opentelemetry-go-build-tools/issues/992)) ##### 🚩 Deprecations 🚩 - `semconvgen`: The semconvgen tooling is deprecated. ([#&open-telemetry#8203;1004](https://redirect.github.com/open-telemetry/opentelemetry-go-build-tools/issues/1004)) Use Weaver instead. ##### 💡 Enhancements 💡 - `checkapi`: Allow to check the API of components matches strictly to guidelines, with the only structs exported the Config structs. ([#&open-telemetry#8203;894](https://redirect.github.com/open-telemetry/opentelemetry-go-build-tools/issues/894)) - `issuegenerator`: Increased search for existing issues to 6 months. ([#&open-telemetry#8203;925](https://redirect.github.com/open-telemetry/opentelemetry-go-build-tools/issues/925)) - `multimod`: Add retries to multimod sync ([#&open-telemetry#8203;941](https://redirect.github.com/open-telemetry/opentelemetry-go-build-tools/issues/941)) This tries to address occasional flakes in the Go proxy. - `multimod`: Support custom version reference files ([#&open-telemetry#8203;994](https://redirect.github.com/open-telemetry/opentelemetry-go-build-tools/issues/994)) A new "modules" section is parsed in the version configuration. This section defines relative file paths for files that references the version of the module set. If this section is not used for a module the default "version.go" file at the root of the module directory is still assumed. ##### 🧰 Bug fixes 🧰 - `multimod`: Use Go errors to return error instead of logging and halting. ([#&open-telemetry#8203;1006](https://redirect.github.com/open-telemetry/opentelemetry-go-build-tools/issues/1006)) - `multimod`: Fix the multimod root command name in help text. ([#&open-telemetry#8203;991](https://redirect.github.com/open-telemetry/opentelemetry-go-build-tools/issues/991)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

….24.0 (open-telemetry#6972) This PR contains the following updates: | Package | Change | Age | Confidence | |---|---|---|---| | [go.opentelemetry.io/build-tools/gotmpl](https://redirect.github.com/open-telemetry/opentelemetry-go-build-tools) | `v0.23.1` -> `v0.24.0` | [![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fbuild-tools%2fgotmpl/v0.24.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fbuild-tools%2fgotmpl/v0.23.1/v0.24.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>open-telemetry/opentelemetry-go-build-tools (go.opentelemetry.io/build-tools/gotmpl)</summary> ### [`v0.24.0`](https://redirect.github.com/open-telemetry/opentelemetry-go-build-tools/blob/HEAD/CHANGELOG.md#v0240) [Compare Source](https://redirect.github.com/open-telemetry/opentelemetry-go-build-tools/compare/v0.23.1...v0.24.0) ##### 🛑 Breaking changes 🛑 - `multimod`: Default to attempting pre-releasing all module sets. ([#&open-telemetry#8203;992](https://redirect.github.com/open-telemetry/opentelemetry-go-build-tools/issues/992)) ##### 🚩 Deprecations 🚩 - `semconvgen`: The semconvgen tooling is deprecated. ([#&open-telemetry#8203;1004](https://redirect.github.com/open-telemetry/opentelemetry-go-build-tools/issues/1004)) Use Weaver instead. ##### 💡 Enhancements 💡 - `checkapi`: Allow to check the API of components matches strictly to guidelines, with the only structs exported the Config structs. ([#&open-telemetry#8203;894](https://redirect.github.com/open-telemetry/opentelemetry-go-build-tools/issues/894)) - `issuegenerator`: Increased search for existing issues to 6 months. ([#&open-telemetry#8203;925](https://redirect.github.com/open-telemetry/opentelemetry-go-build-tools/issues/925)) - `multimod`: Add retries to multimod sync ([#&open-telemetry#8203;941](https://redirect.github.com/open-telemetry/opentelemetry-go-build-tools/issues/941)) This tries to address occasional flakes in the Go proxy. - `multimod`: Support custom version reference files ([#&open-telemetry#8203;994](https://redirect.github.com/open-telemetry/opentelemetry-go-build-tools/issues/994)) A new "modules" section is parsed in the version configuration. This section defines relative file paths for files that references the version of the module set. If this section is not used for a module the default "version.go" file at the root of the module directory is still assumed. ##### 🧰 Bug fixes 🧰 - `multimod`: Use Go errors to return error instead of logging and halting. ([#&open-telemetry#8203;1006](https://redirect.github.com/open-telemetry/opentelemetry-go-build-tools/issues/1006)) - `multimod`: Fix the multimod root command name in help text. ([#&open-telemetry#8203;991](https://redirect.github.com/open-telemetry/opentelemetry-go-build-tools/issues/991)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

…elemetry#7000) This PR contains the following updates: | Package | Change | Age | Confidence | |---|---|---|---| | [go-simpler.org/sloglint](https://redirect.github.com/go-simpler/sloglint) | `v0.11.0` -> `v0.11.1` | [![age](https://developer.mend.io/api/mc/badges/age/go/go-simpler.org%2fsloglint/v0.11.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go-simpler.org%2fsloglint/v0.11.0/v0.11.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>go-simpler/sloglint (go-simpler.org/sloglint)</summary> ### [`v0.11.1`](https://redirect.github.com/go-simpler/sloglint/releases/tag/v0.11.1) [Compare Source](https://redirect.github.com/go-simpler/sloglint/compare/v0.11.0...v0.11.1) - [`261065f`](https://redirect.github.com/go-simpler/sloglint/commit/261065f) fix(static-msg): do not report constants defined in another file ([#&open-telemetry#8203;93](https://redirect.github.com/go-simpler/sloglint/issues/93)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

….0 (open-telemetry#7024) This PR contains the following updates: | Package | Change | Age | Confidence | |---|---|---|---| | [go.opentelemetry.io/collector/pdata](https://redirect.github.com/open-telemetry/opentelemetry-collector) | `v1.35.0` -> `v1.36.0` | [![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fcollector%2fpdata/v1.36.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fcollector%2fpdata/v1.35.0/v1.36.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>open-telemetry/opentelemetry-collector (go.opentelemetry.io/collector/pdata)</summary> ### [`v1.36.0`](https://redirect.github.com/open-telemetry/opentelemetry-collector/blob/HEAD/CHANGELOG.md#v1360v01300) ##### 🛑 Breaking changes 🛑 - `exporter/otlp`: Remove deprecated batcher config from OTLP, use queuebatch ([#&open-telemetry#8203;13339](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/13339)) ##### 💡 Enhancements 💡 - `exporterhelper`: Enable items and bytes sizers for persistent queue ([#&open-telemetry#8203;12881](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/12881)) - `exporterhelper`: Refactor persistent storage size backup to always record it. ([#&open-telemetry#8203;12890](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/12890)) - `exporterhelper`: Add support to configure a different Sizer for the batcher than the queue ([#&open-telemetry#8203;13313](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/13313)) - `yaml`: Replaced `sigs.k8s.io/yaml` with `go.yaml.in/yaml` for improved support and long-term maintainability. ([#&open-telemetry#8203;13308](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/13308)) ##### 🧰 Bug fixes 🧰 - `exporterhelper`: Fix exporter.PersistRequestContext feature gate ([#&open-telemetry#8203;13342](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/13342)) - `exporterhelper`: Preserve all metrics metadata when batch splitting. ([#&open-telemetry#8203;13236](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/13236)) Previously, when large batches of metrics were processed, the splitting logic in `metric_batch.go` could cause the `name` field of some metrics to disappear. This fix ensures that all metric fields are properly preserved when `metricRequest` objects are split. - `service`: Default internal metrics config now enables `otel_scope_` labels ([#&open-telemetry#8203;12939](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/12939), [#&open-telemetry#8203;13344](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/13344)) By default, the Collector exports its internal metrics using a Prometheus exporter from the opentelemetry-go repository. With this change, the Collector no longer sets "without\_scope\_info" to true in its configuration. This means that all exported metrics will have `otel_scope_name`, `otel_scope_schema_url`, and `otel_scope_version` labels corresponding to the instrumentation scope metadata for that metric. This notably prevents an error when multiple metrics are only distinguished by their instrumentation scopes and end up aliased during export. If this is not desired behavior, a Prometheus exporter can be explicitly configured with this option enabled.  </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

alliasgher added 3 commits April 15, 2026 00:20

alliasgher requested review from MrAlias, XSAM, dashpole, dmathieu, flc1125 and pellared as code owners April 14, 2026 20:12

alliasgher mentioned this pull request Apr 14, 2026

attribute: Improve performance of hashValue for BOOLSLICE, INT64SLICE, FLOAT64SLICE, STRINGSLICE #8200

Open

pellared closed this Apr 14, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

attribute: avoid reflection for small fixed-array slice types in hashKV#8203

attribute: avoid reflection for small fixed-array slice types in hashKV#8203
alliasgher wants to merge 3 commits intoopen-telemetry:mainfrom
alliasgher:perf-hash-slice-types

alliasgher commented Apr 14, 2026

Uh oh!

pellared commented Apr 14, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

alliasgher commented Apr 14, 2026

Benchmarks

Uh oh!

pellared commented Apr 14, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants